{"meta":{"database":"Global Social Engineering Impact Database","license":"CC BY 4.0 — attribute to Netarx Social Engineering Incident Database","url":"https://global-social-engineering-impact-da.vercel.app/incidents/2016-milwaukee-bucks-employee-sends-players-and-staff-w-2s-to-an-impersonator"},"incident":{"slug":"2016-milwaukee-bucks-employee-sends-players-and-staff-w-2s-to-an-impersonator","title":"Milwaukee Bucks employee sends players' and staff W-2s to an impersonator","date":"2016-04-26","date_precision":"day","year":2016,"victim_org":"Milwaukee Bucks (NBA)","sector":"Media & Entertainment","country":"United States","primary_vector":"Business Email Compromise","secondary_vectors":[],"ai_involvement":"No AI reported","ai_notes":"","outcomes":["Data Breach","Identity Theft"],"loss_usd":null,"loss_kind":null,"loss_note":"","records_affected":null,"threat_actor":null,"summary":"The NBA's Milwaukee Bucks disclosed in May 2016 that an employee had emailed 2015 W-2 tax documents for players and staff to an unknown party in response to a message impersonating the team's president. The documents included names, addresses, Social Security numbers and compensation figures. The team offered three years of credit monitoring to those affected.","how_it_worked":"On 26 April 2016 an email arrived that appeared to be from the Bucks' president requesting the organisation's W-2 forms. A staff member sent them. The pretext was the standard W-2 season request, and the impersonated identity was the single most senior person in the organisation, which suppresses the instinct to verify. A professional sports team is an unusually attractive target for this scheme because the compensation figures in the files are large and publicly interesting, and because players' Social Security numbers carry high resale value. Discovery came only after the request was later questioned internally.","lessons":"A named-executive request for the entire workforce's tax records should trigger a mandatory verification call, and payroll data should be exchanged only through controlled systems.","confidence":"Confirmed","sources":[{"title":"Milwaukee Bucks' tax information released by employee who fell for email scam","url":"https://www.washingtonpost.com/news/early-lead/wp/2016/05/19/milwaukee-bucks-tax-information-released-by-employee-who-fell-for-email-scam/","publisher":"The Washington Post"},{"title":"Bucks leak tax info of players, employees as result of email scam","url":"https://www.espn.com/nba/story/_/id/15615363/milwaukee-bucks-leak-tax-information-players-employees-result-email-scam","publisher":"ESPN"}],"entry_type":"incident","url":"https://global-social-engineering-impact-da.vercel.app/incidents/2016-milwaukee-bucks-employee-sends-players-and-staff-w-2s-to-an-impersonator"}}